CVE-2026-77166: Undefined Security Weakness

The emoji field in the page emoji update endpoint does not properly validate user input. By injecting long text and line breaks, the sidebar layout becomes broken and can hide other items...

Nextcloud: Improper input validation in emoji field leads to sidebar UI denial of service

A vulnerability was discovered in the emoji field validation of the page emoji update endpoint. Improper input validation allowed attackers with edit permissions to submit excessively long strings containing newline characters instead of valid emoji characters. This caused the sidebar layout to...